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(54) Method and apparatus for adaptably providing data to a network environment 



(57) A method and apparatus for adaptably provid- 
ing data to a virtual desktop system is described. The 
computational service provider is configured to prepare 
and transmit one or more data streams through a viable 
interconnection fabric to multiple HIDs. The data stream 
is configured by the computational service provider to 
adaptably meet the performance needs of the HID 
receiving the data stream. This enables multiple HIDs to 
receive variants of the same data stream that may differ 
in quantity,, quality, and/or data format In one embodi- 
ment of the invention, a decode module prepares data 
for transport by separating decoded data into individual 
processes. Before a HID may connect to a process the 
HID is authenticated. The processes are further 
adjusted by a resource optimization module to take into 
account the characteristics of each HID requesting 
access. The resource optimization module also takes 
into account the characteristics of the interconnection 
fabric coupling the HID and the computational service 
provider. 
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Description 

FIELD OF THE INVENTION 

[0001 ] This invention relates to the field of computer 5 
software. More specifically, the invention relates to a 
method and apparatus for adaptably providing data to a 
network environment. 

[0002] Portions of the disclosure of this patent doc- 
ument contain material that is subject to copyright pro- w 
tection. The copyright owner has no objection to the 
facsimile reproduction by anyone of the patent docu- 
ment or the patent disclosure as it appears in the Patent 
and Trademark Office file or records, but otherwise 
reserves all copyrights whatsoever. Sun, Sun Microsys- is 
terns, the Sun logo, Solaris, SPARC, 'Write Once. Run 
Anywhere", Java, JavaOS. JavaStation and all Java- 
based trademarks and logos are trademarks of Sun 
Microsystems. Inc. in the United States and in other 
countries. 20 

BACKGROUND 

[0003] A computer network is sometimes used to 
deliver streams of data (such as video data) to one or 25 
more computers on a network. The video data can be 
presented at different levels of quality, with higher qual- 
ity meaning larger amounts of data needs to be trans- 
mitted. Different receiving computers may not be 
capable of displaying the same quality of data. Currently 30 
there is no effective way of sending video data with dif- 
ferent levels of quality to different receiving computers. 
The problem can be understood by reviewing current 
networks and schemes for data transmission. 

35 

Networks Generally : 

[0004] A network is an amalgamation of intercon- 
nected computers; Computational devices properly 
connected to the network may utilize the network to 40 
communicate with other devices that are coupled to the 
network. A computational service provider computer, for 
example, may use a network to transmit a video data 
stream to a client computer for display. There are a vari- 
ety of different techniques for propagating data to as 
devices connected to the network For example, data 
may be sent from a source computer to a destination 
computer, broadcast from one computer to all other 
computers on the network, or sent from a source com- 
puter to a select group of destination computers. Each so 
of these methods is inherently limited in its ability to 
adequately balance the needs: of the u^er with the per- 
formance characteristics of the network: For example, ; 
current data dissemination techniques do not provide a 
way to ensure data is displayed only to an intended ss 
recipient while also taking into account the characteris- 
tics of the network link that may affect transmission of 
the data to be displayed. Current methods for propagat- 



ing data throughout a network lack a scheme for explic- 
itly authorizing users to connect to a particular data 
stream and also do not provide a way to effectively con- 
trol the quantity and quality of data transmitted to the 
user. A general discussion of the existing techniques for 
sending data across a network and the problems asso- 
ciated with using such methods follows. 

Unicasting: 

[0005] Sending data from a source computer to a 
single destination computer is called unicasting. This is 
the standard form of service provided by networking 
protocols such as the Transmission Control Protocol 
(TCP). TCP is a connection-oriented transport protocol 
designed to provide network functionality to the user. 
TCP typically works in collaboration with other protocols 
such as the Internet Protocol (IP) and Media Access 
Control (MAC), protocols such as Ethernet in order to 
provide the user with network services. When data is 
transmitted from one location to another location using 
TCP the data is placed into packets (e.g. datagrams). 
Each packet oif data is assigned a source address and a 
destination address, the source address indicates 
which computer is responsible for sending the data and 
the destination address indicates which computer is to 
receive the data that is sent. 

[0006] Referring now to Figure 1 an example of uni- 
casting is illustrated. Network nodes 101-105 are five 
separate computational devices. Personal computers 
and network equipment such ais routers, switches, 
and/or hubs are examples of network nodes 101-105. 
Other devices such as laptops and Personal Desktop 
Assistants (PDAs) may also function as network nodes 
101-105. 

[0007] Network nodes 101-105 may transmit data 
to network nodes 151-154 using network 125. In some 
cases, network 125 achieves connectivity by using the 
Internet- The Internet is a global computer network 
comprised of numerous other networks that are all 
capable of communicating with one another using a 
standardized set of protocols. In other instances net- 
work 1 25 is representative of a wide area network or 
any other type of data transmission medium that allows 
nodes 101-105 to communicate with nodes 151-154. 
[0008] Unicasting enables a data source to transmit 
data to a data destination. The data source is the device 
tasked to send the data and the data destination is the 
device the data is directed to. If, for example, network 
node 103 transmits data to network node 154 using 
path 120, then network node 103 is the data source and 
network node 154 is the data destination, If. however, 
network node 154 sends data back to network node 
103, then network node 154 becomes the data source 
and network node 103 becomes the data destination. 
Data that is unicast may also be sent between two com- 
puters residing on the same network. For example, net- 
work node 101 may send data to and receive data from 
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network node 105. In this situation, data is not transmit- 
ted through network 125 but is sent using path 121 . 
[0009] A problem with unicasting is that is does not 
allow for the efficient transfer of data to multiple comput- 
ers. If, for example, a user were to want to display a 
video on a group of recipient nodes that user would 
have to send individual copies of the video to each 
recipient Sending multiple copies of the same file to 
each recipient utilizes additional processor resources 
on the transmitting node and wastes network resources. 
In such situations, the amount of users that may receive 
data is constrained by the amount of bandwidth availa- 
ble. Unicasting does not provide a way to control the 
quantity and quality of data sent to the user. Addition- 
ally, unicasting schemes generally lack a mechanism for 
authorizing users to connect to a particular data stream. 

Broadcasting: 

[0010] Another technique used for distributing data 
is referred to as broadcasting. When data is broadcast 
it is sent to every node connected to the network. 
Broadcast services are typically provided by low-level 
network layer protocols such as the Internet Protocol 
(IP). Data that is broadcast is sent in a uniform data for- 
mat. For example, a video broadcast may be sent to all 
recipients using the MPEG-2 data format. Receiving 
nodes that lack the ability to processes MPEG-2 data 
cannot display the broadcast Thus, a problem with 
broadcasting is that each recipient is confined to utiliz- 
ing a particular data format. 

[0011] Referring now to Figure 2 an example of 
broadcasting is illustrated. A problem with broadcasting 
is that data is sent to every node on the network, regard- 
less of whether the node is interested in receiving the 
broadcast. For example/if node 205 begins broadcast- 
ing data all remaining nodes 201-204 on network 200 
receive the broadcast data. Each remaining node 201- 
204 is required to perform some processing in order to 
determine whether it is interested in the broadcast data. 
[001 2] Broadcast data may be confined to a certain 
portion of a network (e.g. a subnet or a LAN). For exam- 
ple, data broadcast using path 220 may be confined to 
network 200 and not transmitted to network 250 via net- 
work 268. When this is done network nodes 251 -256 do 
not receive or process any data related to the broad- 
cast However, even localized broadcasts are undesira- 
ble because they still require all nodes on the subnet 
performing the broadcasting to perform some process- 
ing in order to determine whether or not it is interested 
in the broadcast data. Thus, broadcasts do not provide 
a way to efficiently allocate network resources based 
upon a network's characteristics. Broadcasting does not 
provide a way to control the quantity and quality of data 
sent to the user and lacks a mechanism for authorizing 
users to connect to a particular data stream. 



Multicasting : 

[0013] Multicasting is a technique for transmitting 
data from one computer to many different computers or 
s from many computers to many other computers. Trans- 
mitting a corporate message to a group of employees or 
sending an audio feed to numerous computer users are 
examples of multicasting. Multicasting is widely used to 
propagate data to multiple network nodes (e.g. comput- 
io ers). 

[0014] In a multicast environment, a properly con- 
figured computational device can perform one operation* 
to transmit data to multiple destination devices. For 
example, using multicasting a person can transmit video 

is data to many different computers by initiating a single 
multicasting session. Under the multicast model only 
network nodes that are actively interested in receiving a 
particular multicast have such data routed to them. On 
some networks, certain network nodes automatically 

20 ignore multicast data. Fa- example, some network rout- 
ers are configured to prevent multicast data from enter- 
ing a subnet. Computational devices designed to 
implement firewalls or other such f itterihg mechanisms 
may also be configured to ignore multicast data. 

25 [0015] Multicasting is typically utilized to dissemi- 
nate data to a plurality of network nodes in a single 
transmission. To support multicasting the network infra- 
structure as well as the sending and receiving node(s) 
are multicast enabled. This includes any intermediate 

30 routers that may be involved in transmitting data 
between networks. The computational device responsi- 
ble for performing the multicasting is not required to 
maintain a list of recipients. Instead, the device trans- 
mits a single copy of the multicast message to all the 

35 members of a host group. Copies of the message are 
made when a router determines divergent paths are 
necessary to deliver the message to host group mem- 
bers. 

[001 6] A problem with multicasting is that multicast 
40 enabled networks are not capable of adaptably meeting 
the performance needs of each network, or network 
node, that receives the multicast data. As a result mul- 
ticast networks do hot provide a way for recipients to 
receive variants of the same data that differ in quantity, 
45 quality, and/or data format 

Multicasting Components: 

[001 7] Referring now to Figure 3 an illustration of a 
so network topology configured to support multicasting is 
shown. Sending node 300 and receiving nodes 301 are 
connected to network 325. Network 325 is a Local Area 
Network (LAN). The remaining nodes 302-304 attached 
to network 325 are not configured to accept multicast 
55, data. Sending node 300 and receiving node 301 , how- 
ever, are configured to accept multicast data. This is 
accomplished by 1) installing the appropriate network 
hardware and 2) configuring the two nodes to accept 
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and transmit the necessary protocols (e.g. TCP, IGMP). 
Additionally, a software application capable of sending 
and/or receiving multicast data is necessary. When 
sending nodes 300 and receiving nodes 301 are prop- 
erly configured data can be multicast from sending node 5 
300 to receiving node 301 along path 322. Data that is 
multicast may also be sent to multiple nodes. For exam- 
ple, it is possible to configure remaining nodes 302-304 
to accept and/or perform multicasting. 
[0018] Transmitting data to other networks, how- 10 
ever, requires additional configuration and/or equip- 
ment. For example, for network 350 to begin receiving 
multicast data a multicast router 330 is required. Multi- 
cast router 330 distributes and replicates the multicast 
data stream as is necessary to provide requesting net- is 
work nodes with data. To have the ability to transmit 
multicast data between networks requires that all rout- 
ers present on the path from network 325 to network 
350 be multicast capable. For example, if data is trans- 
mitted from network 325 to network 350 using path 344 20 
then networks 375-377 are multicast capable. However, 
if networks 375-377 do not contain routers that support 
multicasting, tunneling may be used to send multicast 
data through network 340 using networks 378-380. Tun- 
neling is used to connect islands of multicast routers 25 
separated by links that do not support multicasting (e.g. 
networks 378-380). When this approach is used multi- 
cast datagrams are encapsulated into standard unicast 
datagrams and sent through network 340. Tunneling 
may be used to send multicast data across the Internet 30 
(e.g. MBONE) or any other type of viable communica- 
tion network. 

[0019] Network325 and network 350 both contain a 
firewall 399. Firewalls 399 prevent unauthorized data 
from entering a network. When a firewall 399 is present 35 
on a network, such as network 325. network 350. or net- 
work 340, the firewall may need to be reconfigured to 
permit multicast traffic. Network 325 and network 350 
may also contain multicast filtering switches. A multicast 
filtering switch provides a way to localize the amount of 40 
data traffic disseminated on a LAN. If, for example, a fil- 
tering switch is installed on network 325, data will only 
be sent to participating nodes rather than to all seg- 
ments on the LAN. A filtering switch allows receiving 
node 301 to receive multicast data from sending node 45 
300 without interfering with remaining nodes 302-304. 
[0020] If all participating networks are properly con- 
figured to accept multicast data sending node 300 may 
send an identical copy of data 333 to all the nodes that 
request it. For example, data may be sent using path so 
344 from sending node 300 to receiving nodes 301, 
352. 353. and 354. 

Sending and Receiving Multicast Data 

- 55 

[0021] IP multicasting is a form of multicasting data 
across the internet IP multicasts adhere to an address- 
ing standard defined by the Internet Assigned Numbers 
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Authority (IANA). To send data, the sender specifies a 
destination address which is representative of a host 
group and uses the "Send IP" operation to transmit the 
data. The "Send IP" operation is the same operation 
used to transmit unicast data. To receive multicast data 
a user's host application requests membership in the 
multicast host group associated with a particular multi- 
cast For example, if the user wants to view a multicast 
of events taking place on the Space Shuffle, the user 
may request to view that event by issuing a membership 
request. The user's membership request is then com- 
municated to the network hardware which disseminates 
the request, in some instances the request is communi- 
cated to the LAN router. If data is to be sent off the LAN 
the request is communicated to intermediate routers 
between the location of the sender and the receiver. 
The user's membership request also causes the receiv- 
ing computer to start filtering for addresses associated 
with the multicast address identified in the initial 
request. The receiving computer's network interface 
card, for example, starts filtering for the specific data link 
layer addresses associated with the multicast ff the 
multicast is initiated outside the LAN the WAN router 
delivers the requested multicast data to the LAN router. 
The LAN router builds the message and forwards it to 
the receiving computer. The receiving computer listens 
for expected multicast data and passes received data to 
the TCP/IP protocol stack, which makes the data avail- 
able as input to the user's application (e.g. a video view- 
ing application). 

[0022] A problem with IP multicasting is that such 
multicasts do not provide a way to adaptably meet the 
performance needs of each node that wishes to receive 
multicast data. As a result, multicast networks do not 
provide a way for recipients to automatically receive var- 
iants of the same data stream that differ in quantity 
quality, and/or data format. 

SUMMARY OF THE INVENTION 

[0023] A method and apparatus for adaptably pro- 
viding data to a network environment is described. In 
one embodiment of the invention, the network environ- 
ment is a virtual desktop system that provides services 
to the end-user by divicSng functionality between a cen- 
tralized computational service provider and a HID, Data 
and computational functionality is provided by the com- 
putational service provider's data sources via a central- 
ized processing arrangement. At the HID, functionality 
is limited to that which generates output to the user (e.g. 
display and speakers), takes input from the user (e.g. 
mouse and keyboard) or other peripherals that the user 
may interact with (e.g. scanners, cameras, removable 
storage, etc.). The Human Interface Device (HID) is 
connected to the computational service provider via an 
interconnection fabric and is capable of receiving data 
and displaying such data to the user. 
[0024] In accordance with one embodiment of the 
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invention, the computational service provider is config- 
ured to transmit one or more data streams through a 
viable interconnection fabric to multiple HIDs. The data 
stream is configured by the computational service pro- 
vider to adaptably meet the performance needs of the 5 
HID receiving the data stream. This enables multiple 
HIDs to receive variants of the same data stream that 
may differ in quantity, quality, and/or data format In one 
embodiment of the invention, the quantity and/or quality 
of data sent to a HID is dependant upon the conditions 10 
encountered by the computational service provider 
when it attempts to transmit data across the intercon- 
nection fabric. 

[0025] A decode module residing on the computa- 
tional service provider aids in the optimization process, is 
The decode module is capable of processing numerous 
data formats and, for example, may prepare different 
types of video or audio data for transmission to HIDs 
that request it (e.g MPEG, AVI. WAV, AIFF, etc.). In 
one embodiment of the invention, the decode module 20 
prepares data files for transmission to multiple HIDs by 
converting a requested data file into decoded data and 
then separating the decoded data into a plurality of indi- 
vidual process. Having the decode module decode the 
data file a single time when multiple requests for the 25 
same file are made reduces processor overhead. 
[0026] Each process is correlated to an active ses- 
sion on the computational service provider and may 
have a different set of characteristics. For example, in 
one embodiment of the invention, each process is mod- 30 
"rfied to take into account the performance limitations 
and/or advantages of a receiving HID. In other 
instances, the processes have a set of common charac- 
teristics determined by the decode module. When a 
process is modified, the amount of resources needed to 35 
simultaneously provide data to multiple HIDs is 
reduced. Thus, modif ication of a process results in con- 
trol over the amount of data that is to be placed on the 
interconnection fabric. 

[0027] The computational service provider is also 40 
capable of determining whether a particular user has 
permission to access the processes resulting from the 
data stream generated by decode module. In one 
embodiment of the invention, the computational service 
provider contains a resource optimization module con- 45 
figured to determine how much bandwidth to consume 
while transmitting a particular process to a HID. The 
resource optimization module utilizes the bandwidth 
allocation message to determine how to adjust the proc- 
ess or data stream before transmitting it to a requesting so 
HID. 

[0028] In one embodiment of the invention, the 
process used by the resource optimization module to 
determine how much of the available network band- 
width to utilize while transmitting data to a particular HID 55 
is as follows. Initially, a HID issues a request for data to 
computational service provider. The computational , 
service provider responds by transmitting a message 



identifying its bandwidth preference to the requesting 
HID. The HID then writes back a message communicat- 
ing the amount of bandwidth actually available. The 
computational service provider, after taking into account 
any user preferences that exist, adjusts the requested 
process to consume an appropriate amount of band- 
width. 

DESCRIPTION OF THE DRAWINGS 
[0029] 

Figure 1 is an illustration of a network configured to 
perform unicasting. 

Figure 2 is an illustration of a network configured to 
perform broadcasting. 

Figure 3 is an illustration of a network configured to 
allow the transmission of multicast data. 

Figure 4 illustrates an execution environment for 
one embodiment of the invention. 

Figure 5 illustrates an embodiment of the invention 
that utilizes a decode module to prepare data for 
distribution to multiple HIDs. 

Figure 6 illustrates how one embodiment of the 
invention determines whether a particular HID has 
permission to obtain data from a computational 
.service provider. 

Figure 7 illustrates an embodiment of the invention 
that utilizes a resource allocation module to prepare 
data for transmission to a requesting HID. 

Figure 8 illustrates the process used to determine 
how to optimally prepare data for transport to a 
requesting HID. 

Figure 9 illustrates a block diagram of a HID used in 
one embodiment of the invention. 

Figure 10 illustrates a block diagram of a HID used 
in one embodiment of the invention. 

Figure 11 illustrates a HID connected to a set of 
computational service providers via an intercon- 
nection fabric. 

DETAILED DESCRIPTION 

[0030] A method and apparatus for adaptably pro- 
viding data to a network environment is described. In 
the following description numerous specific details are 
set forth in order to provide a more thorough under- 
standing of the present invention. It will be apparent, 
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however, to one skilled in the art. that the present inven- 
tion may be practiced without these specific details. In 
other instances, well-known features have not been 
described in detail so as not to obscure the invention. 

The Virtual Desktop Environment : 

[0031] An embodiment of the present invention uti- 
lizes a system architecture referred to as the virtual 
desktop system. The virtual desktop system may be 
analogized to other highly partitioned systems. For 
example, a public telephone company maintains power- 
ful and sophisticated processing power and large data- 
bases at central offices. However, the human interface 
device, the telephone, is relatively simple and does not 
require upgrading when new features or services are 
added by the telephone company. The telephone itself 
becomes an appliance of low cost and extremely low 
obsolescence. Similarly, the display monitor of most 
computer systems has low obsolescence, and is typi- 
cally retained through most desktop system upgrades. 
[0032] The virtual desktop system provides serv- 
ices to the end-user by dividing functionality between a 
centralized computational service provider and a 
"Human Interface Device** (HID). Data and computa- 
tional functionality is provided by the computational 
service provider's data sources via a centralized 
processing arrangement At the HID, functionality is lim- 
ited to that which generates output to the user (e.g. dis- 
play and speakers), takes input from the user (e.g. 
mouse and keyboard) or other peripherals that the User 
may interact with (e.g. scanners, cameras, removable 
storage, etc.). The HID is connected to the computa- 
tional service provider via an interconnection fabric arid 
is capable of receiving data and displaying such data to 
the user. A user's virtual desktop may be obtained from 
the computational service provider and viewed from any 
HID that is coupled to the interconnection fabric. 
[0033] The functionality provided by the virtual 
desktop system is partitioned between a display and 
input device, and data sources or services. In one 
embodiment of the Invention, the display and input 
device is a HID. The partitioning of this system is such 
that state and computation functions have been 
removed from the HID and reside on data sources or 
services. A centralized computational service provider 
may provide the data sources or services. In one 
embodiment of the invention, one or more services 
communicate with one or more H IDs through a connec- 
tive fabric, such as a network. An example of such a 
system is illustrated in Figure 5. Referring to Figure 5, 
the system consists of a computational service provider 
500 that communicates data through interconnection 
fabric 525 to HIDs 510-512, HIDs 510-512 display the 
output of a computational service provider to the user 
on a virtual desktop. Users may access the same virtual 
desktop regardless of which HID 510-512 is used to 
access the computational service provider 500. 



Computational Service Providers 

[0034] The centralized computational service pro- 
vider is responsible for providing computational capacity 

5 to the system independently of the destination the data 
is generated for. For example, referring now to Figure 5, . 
computational service provider 500 executes computer 
programs on behalf of multiple HID devices 510-512. 
Computer programs residing on computational service 

10 provider 500 are made available to HIDs 510-512 via 
interconnection fabric 525. If. for example, a user at a 
HID requests to execute a computer program, computa- 
tional service provider 500 will utilize its local computa- 
tional resources to begin execution of the program and 

is then transmit the output to the HID device initiating the 
request. This creates the appearance that the program 
is executing on the HID device. This paradigm shifts the 
processing load from HIDs 510-512, where it tradition- 
ally resides, to computational service provider 500. As a 

20 result of this shift, maximizing the transmission capacity 
of the interconnection fabric responsible for adjoining 
the HIDs with the centralized computational service pro- 
vider is increasingly important 

[0035] In the virtual desktop system, computational 

25 power and state maintenance is found in the service 
providers, or services. The services are not tied to a 
specific computer, but may be distributed over one or 
more traditional desktop systems such as described in 
connection with Figure 4, or with traditional computa- 

30 tional service providers. One computer may have one or 
more services, or a service may be implemented by one 
or more computers. The service provides computation, 
state, and data to the HIDs and the service-is iJrider the - 
control of a common authority or manager, ft is impor- 

35 tant to note that the central data source can also provide 
data that comes from outside of the central data source, 
such as for example, the Internet or World Wide Web. 
The data source can also be broadcast entities such as 
those that broadcast data such as television or radio 

40 signals. 

[0036] Examples of services include X1 1 AJnix serv- 
ices, archived or live audio or video services, Windows 
NT service, Java™ program execution service, and oth- 
ers. A service herein is a process that provides output 

45 data and responds to user requests and input 

[0037] It is the responsibility of the service to handle 
communications with HIDs currently being used to 
access the given service. This involves taking the output 
from the computational service and converting it to a 

so standard protocol for transmission to the HID. This data 
protocol conversion is handled in one embodiment of 
the invention by a middleware layer, such as the X1 1 
computational service provider, the Micosoft Windows 
interface, a video format transcoder, the OpenGL irrter- 

55 face, or a variant of the java.awt.graphics class within 

• the service producer machine. 

[0038] In an embodiment of the invention, each 
service is provided by a computing device optimized for 
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increased performance. For example, an Enterprise 
class machine could be used to provide X1 1/Unix serv- 
ice, a Sun MediaCenter could be used to provide video 
service, a Hydra based NT machine could provide 
applet program execution service. 5 
[0039] The service producing computer systems 
connect directly to the HIDs through the interconnect 
fabric. It is also possible for the service producer to be a 
proxy for another device providing the computational 
service, such as a database computer in a three tiered 10 
architecture; where the proxy computer might only gen- 
erate queries and execute user interface code. 



Interconne ction Fabric 
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[0040] In the invention, the interconnection fabric is 
any of multiple suitable communication paths for carry- 
ing data between the services and the HIDs. In one 
embodiment the interconnect fabric is a local area net- 
work implemented as an Ethernet network. Any other 20 
local network may also be utilized. The invention also 
contemplates the use of wide area networks, the Inter- 
net the World Wide Web, and others. The interconnect 
fabric may be implemented with a physical medium 
such as a wire or fiber optic cable, or it may be imple- 25 
mented in a wireless environment. 
[0041] In one embodiment of the invention, the 
interconnect fabric provides actively managed, low- 
latency, high-bandwidth communications between the 
HID and the services being accessed. One embodiment 30 
contemplates a single-level, switched network, with 
cooperative (as opposed to competing) network traffic. 
Dedicated or shared communications interconnects 
may be used in the present invention. 

35 

HID Devices 

[0042] The HID is the means by which users access 
the computational services provided by the computa- 
tional service provider, and as such the HID may also be 40 
referred to as a client, a thin-dient, or workstation or ter- 
minal. Figure 11 illustrates HIDs 1121, 1122, and 1123. 
A HID consists of a display 1126, a keyboard 1124, 
mouse 1125, and audio speakers 1127. The HID 
includes the electronics needed to interface these 45 
devices to the interconnection fabric 1 101 and to trans- 
mit to and receive data from the services provided by 
computational service providers 1110-1114. 
[0043] A block diagram of the HID is illustrated in 
Figure 9. The components of the HID are coupled inter- so 
nally to a PCI bus 912. A network control block 902 
communicates to the interconnect fabric, such as an 
Ethernet through line 914. An audio codec 903 
receives audio data on interface 916 and is coupled to 
block 902. USB data communication is provided on 55 
lines 91 3 to USB controller 901 . 
[0044] An embedded processor 904 may be, for 
example, a Sparc2ep with coupled flash memory 905 



and DRAM 906. The USB controller 901, network con- 
troller 902 and embedded processor 904 are all coupled 
to the PCI bus 912. Also coupled to the PCI 912 is the 
video controller 909. The video controller 909 may be 
for example, and ATI Rage128 frame buffer controller 
(or any other suitable controller) that provides SVGA 
output on line 915. NTSC or PAL data is provided into 
the video controller 910. A smartcard interface 908 may 
also be coupled to the video controller 909. 
[0045] Alternatively, the HID can be implemented 
using a single chip solution as illustrated in Figure 10. 
The single chip solution includes the necessary 
processing capability implemented via CPU 1001 and 
graphics renderer 1005. Chip memory 1007 is provided, 
along with video controller/interface 1006. A universal 
serial bus (USB) controller 1002 is provided to permit 
communication to a mouse, keyboard and other local 
devices attached to the HID. A sound controller 1003 
and interconnect interface 1004 are also provided. The 
video interface shares memory 1007 with the CPU 1001 
and graphics renderer 1005. The software used in this 
embodiment may reside locally in non-volatile memory 
or it can be loaded through the interconnection interface 
when the device is powered. 

[0046] According to one embodiment of the inven- 
tion, the HID device requesting the output, may change 
without interrupting execution of the program on compu- 
tational service provider 500. For example, if a video 
display program executing on computational service 
provider 500 begins outputting a video data stream to 
HID 512, HID 512 may elect to stop receiving the video 
data without interrupting execution of the video display 
program on computational service provider 500. The 
user may connect to the same video data stream by 
bringing up a virtual desktop on a different HID (e.g. HID 
510). In one embodiment of the invention, the video 
data is no longer sent to HID 512 when the user 
removes a smart card. When the user places the same 
smart card into HID 510, computational service provider 
500 beings transmitting the same video data to HID 
512. 



OPERATION OF THE VIRTUAL DESKTOP SYSTEM 
ARCHITECTURE 



Session Handling 

[0047] The provision of services in the virtual desk- 
top system architecture revolves around an abstraction 
referred to here as a session. A session is a long-lived, 
persistent and reliable representation of those services 
which are executing on behalf of a user at any point in 
time. A new session is created when a new user is ena- 
bled on the system, and all of a user's sessions are 
destroyed when a user is removed from the system. The 
session abstraction is maintained by a facility known as 
the session manager, whose duty it is to maintain the 
database of mappings between users and sessions. 
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and to manage the services which make up each ses- 
sion. For each user that the system is aware of there are 
one or more sessions. The session manager offers a 
service to the user that allows sessions to be configured 
and new sessions to be created. 
[0048] In the system of the invention, a user is not 
tied to any particular HID. A user is associated with the 
user session, and the session can be displayed on any 
HID that the user accesses. An abstraction known as 
the authentication manager is responsible for ensuring 
the legitimacy of a user and associating users with their 
desired session. The HID is typically in sleep, stand-by, 
or off mode when not in use. When a user wants to use 
a particular HID, an authentication exchange takes 
place that may consist of one or more of a smartcard, 
key, password, and/or biometric mechanism. 
[0049] When the authentication manager validates 
a user, it notifies the user's current session manager, 
which in turn notifies all of the services within the 
selected session, and the session's display is com- 
posed at the user's desktop. From within a session, a 
user can interact with existing services, initiate new 
services, or kill of executing services. When the user 
departs from the HID (e.g. by withdrawing a smartcard) 
the authentication manager notes this and notifies the 
session manager, which in turn notifies all of its related 
services, which stop their display functions, and the HID 
returns to its dormant state. The effect of the activation 
and deactivation of a HID is similar to turning off the dis- 
play monitor on a desktop system. The user desktop is 
still available and perhaps executing, but no display is 
generated. One advantage of the present invention is 
that the user desktop can be accessed on any con- 
nected HID. . 

[0050] Figure 2 provides an example of session 
management and authorization in the present invention. 
Network terminal 202 is a HID, having the task of dis- 
i playing output of services to a user and obtaining input 
to services from the user. Network terminal 202 has the 
ability to respond to a command (e.g., display com- 
mand) received from, for example, a software program 
(e.g.. services 230-238, authentication 204 and session 
manager 206) executing on a computational service 
provider. The input received from a user is forwarded to, 
for example, a service that is fulfilling a user request 
[0051] A service is a program that performs some 
function for a user. More than one computational serv- 
ice provider can execute the services that comprise a 
session. For example, in session 208, service 230 is 
executing on computational service provider 210, serv- 
ices 232 and 234 are executing on computational serv- 
ice provider 212 and services 236 and 238 are 
executing on computational service provider 214. 
[0052] , A user accesses a system (e.g., a computa- 
tional service provider, a session, a service and a net- 
work terminal) by initiating a login. During login, the user 
is validated by authentication manager 204. Various 
techniques can be used to allow the user to initiate a 
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login. For example, the user can initiate a login by 
pressing a key on network terminal 202. 
[0053] In one embodiment of the invention, a user 
accesses the system by inserting a smart card in a card 

5 reader (e.g., card reader 216) attached to network ter- 
minal 202. A smart card is a card that is capable of stor- 
ing information such as m a magnetic strip or memory of 
the smart card. The smart card can store user informa- 
tion such as a user's identification (i.e., user ID such as 

io a 64-bit number) and a secret code (e.g., a 128-bit ran- 
dom number) that "is transmitted to network terminal 
202. The secret code is used during authentication. 
[0054] Network terminal 202 is aware of (or can 
obtain) its interconnection network address and the \ 

is address of authentication manager 204. When a user 
initiates the login, network terminal 202 initiates com- 
munication with authentication manager 204 to begin 
authentication. Authentication manager 204 is a pro- 
gram active (e.g., executing) on a computational service 

20 provider connected to network terminal 202 via an inter- 
connection network such as a local area network (LAN), 
for example. It should be apparent, however, that net- 
work terminal 202 can be connected to authentication 
manager 204 using other interconnection network tech- 

25 nologies such as a fiber channel loop or point-to-point 
cables. Network terminal 202 sends a startup request to 
authentication manager 204 that includes a user identi- 
fication (userlD). 

[0055] In one embodiment of the invention, authen- 
30 tication manager 204 responds to the startup request by 
initiating an authentication to validate the user. Authen- 
tication can include any mechanism that verifies the 
-'identify of the user to the system. A key or password ~ 
known only to the user, or biometrics information can be 
35 used to authenticate the user. 

[0056] In an embodiment of the invention, authenti- 
cation is performed by verifying a personal identification 
number (PIN) entered by the user at network terminal 
202. Authentication jnanager 204 sends a command 
40 (i.e.,achallengecommarKj)toin*itiateentryoftheuser's : 
PIN at network terminal 202. The user entry is pack- 
aged by network terminal 202 and transmitted to 
authentication manager 204 (i.e., a challenge 
response). 

45 [0057] .Authentication manager 204 verifies the 
challenge response with user information retained in 
authentication database 218, information supplied by 
the user and information that is generated during 
authentication. When the user is authenticated, the user , 

so is given access to a session (e.g., session 208). A ses- 
sion is a persistent representation of a related set of one 
or more services executing on behalf of a user. 
[0058] If the expected result is received from the 
user, authentication manager 204 notifies session man-: 

55 ager 206 (via a connect message) that the user has 
logged into the system on network terminal 202. Ses- 
sion information contained in authentication database 
218 is used to identify the computational service pro- 



EP 1 043 655 A2 



JDOC1D: <EP 1043655A2J_> 



15 



EP 1 043 655 A2 



16 



vider. port and session identifier (ID) for session man- 
ager 206. Session manager 206 is a program that is 
active on a computational service provider and is con- 
nected to authentication manager 204 and network ter- 
minal 202 via an interconnection network, for example. 
Authentication manager 204 sends a message to ses- 
sion manager 206 using session manager 206's com- 
putational service provider and port information 
contained in authentication database 218. 
[0059] In response to the connect message from 
authentication manager 204. session manager 206 noti- 
fies the services in the user's current session (i.e., the 
services in session 208) that the user is attached to net- 
work terminal 202. That is, session manager 206 sends 
a connect message to services 230-238 to direct output 
to network terminal 202. Session manager 206 ensures 
that services that are considered to be required serv- 
ices of the session are executing. If not, session man- 
ager 206 causes them to be initiated. The user can 
interact with services 230-238 within a session (e.g.. 
session 208). Network terminal 202 is connected to 
computational service providers 210. 212 and 214 (and 
services 230-238) via an interconnection network such 
as a local area network or other interconnection tech- 
nology. The user can also start new services or termi- 
nate existing services. 

[0060] The user can detach from the system by 
removing the card from card reader 216. Other mecha- 
nisms to express a disconnect can also be used with the 
invention (e.g., a "sign-off button on network terminal 
202). Services 230-238 can continue to run even after 
the user removes the card from card reader 216. That 
is, a user's associated session(s) and the services that 
comprise a session can continue in existence during the 
period that a user is unattached (e.g., logged off ) from 
the system. When the user removes the card from card 
reader 21 6, network terminal 202 notifies authentication 
manager 204 (e.g., via a disconnect message) which 
notifies session manager 206 (e.g., via a disconnect 
message). Session manager 206 notifies services 230- 
238 (e.g., via a disconnect message) which terminate 
their transmission of display commands to network ter- 
minal 202. Services 230-238 continue execution, how- 
ever, during the time that the user is not logged onto a 
network terminal. The user can log back in using a net- 
work terminal such as network terminal 202, connect to 
session 208 and interact with services 230-238. 

Audio Data 

[0061 ] Audio data is delivered to and from the desk- 
top by a set of audio commands which are defined as a 
part of the virtual desktop protocol. Audio reception at a 
desktop device is supported through what could be 
thought of as a "universal receiver" approach — any 
number of streams, of any sample rate data, can be 
sent to a HID and it will mix and output the streams 
appropriately For example, a DAT-quality stereo audio 



stream could be sent in a 16 bit per sample format ait 48 
KHz, which would amount to around 1 .5 Mbps of data 
rate. Several of these streams, as well as multiple other 
audio streams, at other data rates, could be sent to a 

5 HID which will effectively re-time and mix all of the 
streams and generate a system audio output stream. 
[0062] The audio protocol provides a standard pro- 
tocol for services to use. In an embodiment of the inven- 
tion, audio processing and hardware requirements 

10 associated with a receiver are minimized by specifying a 
single audio protocol for transmission of audio data 
between transmitters on a network and the receiver. 
The protocol specifies a sampling rate, bit resolution 
and quantization scheme which allow for high sound 

is quality and further minimize the complexity of the 
receiver, transmitters are equipped with drivers to pro- 
vide for conversion of audio data into the designated 
protocol as needed. 

[0063] Aspects of the designated protocol are pro- 

20 vided to compensate for problems associated with 
transmitting audio streams over a network. The desig- 
nated protocol specifies a format for interleaving audio 
samples within data packets to minimize errors which 
are the result of consecutive missing audio data sam- 

25 pies due to packet loss. The receiver may further com- 
pensate for missing audio data samples trough 
interpolation. In accordance with the designated proto- 
col, a sequence size is specified to govern how the 
audio data is processed. The transmitter controls the 

so sequence size adaptively to maintain audio latency 
within a limit specified for each audio application. The 
designated protocol also provides for determination of a 
mix mode and a number of channels for specifying how 
audio data with multiple channels is mixed and routed 

35 among multiple audio output devices. 

Bandwidth Management 

[0064] Virtual desktop protocol traffic may be bursty 

40 in nature. Long periods of inactivity on the part of a 
service producer are followed by extremely high band- 
width bursts - e.g.. no traffic is generated as a user 
reads data, and then a full screen update is done once 
additional data is requested. Peak data-rate bursts in 

45 excess of 40 Mbps have been observed, while long- 
term average data rate is negligible. The fact that bursts 
have well-defined limits (i.e., ~2 Gbps to change every 
pixel, each frame time), remain typically below the limits 
(i.e.. usually, some subset of the screen's pixels change, 

so then remain constant for a period of time before the next 
change), and the bursts are randomly distributed (i.e., 
users tend to operate independently), all contribute to 
the ability to take advantage of the gains which come 
from statistical multiplexing. However, this also requires 

55 that some means of handling transient overloads be 
provided to deal with times when the demand for sys- 
tem resources exceeds the supply. To this end. a rate 
control mechanism is employed in the management of 
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the interconnection fabric. This is done to ensure that 
producers do not generate more data than a link, or 
HID. can handle. This task is made difficult because 
there are multiple sources sending on a given intercon- 
nect link as well as to a given HID. This means that 5 
some form of distributed coordination (or cooperation) 
must be provided to ensure that the system will work. 
An effective approach to solving this problem is to use 
congestion avoidance and rate control techniques to 
manage the interconnect resources, as well as those 
resources on the desktop. The use of techniques which 
are compatibl e with those in current file transfer protocol 
(FTP) implementations allow virtual desktop protocol 
traffic to coexist well with standard internet traffic. 
[0065] When the cumulative data rate of multiple 
data sources transmitting data over a medium exceeds 
the bandwidth of the medium, the medium is incapable 
of transmitting all of the data at the desired data rates. 
To maintain the data transmission within the bandwidth 
limit of the medium, some of the data must be delayed 
or not sent at all. However, when multiple sources are 
transmitting varying amounts of data at varying times, 
the selection of which data is to be delayed or dropped 
becomes quite complex. Inappropriate selection of data 
to be delayed or dropped can result in severe reductions 
in system performance. Thus, a technique is needed to 
manage the communication of data from multiple 
sources over a medium of finite bandwidth, where the 
cumulative bandwidth needs of the multiple sources 
may exceed the bandwidth of the medium. 
[0066] In one embodiment of the invention, multiple 
data sources are coupled to a data receiver through a 
communication medium-The data sources may be any 
source of information, and the information may be of 
any type or of multiple types. For example, the informa- 
tion may be computer program code, text audio data, 
video data, graphical data, data representative of condi- 
tions or events, digital information, analog information, 
or any other information in any other form. Examples of 
data sources include : computer equipment, audio 
devices, video devices, user input devices, information 
storage devices, network equipment sensors, identifi- 
cation devices, or any other sources of information. ..... 

[0067] When information is to be sent from a data 
source to a data receiver, the data source predicts the 
amount of bandwidth that will be needed to transfer the 
information at an acceptable data rate. The data source 
sends an estimate of its bandwidth needs to the data 
receiver. In an environment with multiple data sources, 
the data receiver receives estimates of bandwidth 
needs from multiple data sources. The data receiver 
adds the estimates of> bandwidth needs of the multiple 
data sources to obtain the cumulative data rate 
requested by the multiple data sources. The data 
receiver compares the cumulative data rate requested 
to the bandwidth of the communication medium over 
which the information is to pass. If the cumulative data 
rate requested is less than the bandwidth of the 



medium, the data receiver does not limit the data rate of 
any of the multiple data sources. The data receiver allo- 
cates to each data source the full amount of bandwidth 
requested by that data source. 

[0068] However, if the cumulative data rate 
requested exceeds the bandwidth of the communication 
medium, the data receiver compares the amount of 
bandwidth requested by each data source. For the data 
sources requesting relatively low amounts of band- 
width, the data receiver allocates all of the requested 
bandwidth. For the data sources requesting relatively 
high amounts of bandwidth, the data receiver allocates 
only a portion of the bandwidth requested. The data 
receiver balances the benefits of only slightly reducing 
the requested bandwidth with the benefits of not reduc- 
ing the requested bandwidth at all to determine the 
number of data sources affected by the reduction and 
the extent of bandwidth reduction for each affected data 
source. 

[0069] In one embodiment of the invention, data 
sources produce estimates of the bandwidth they will 
likely require by monitoring commands being sent to the 
data receiver. For example, a data source comprising 
an X window computational service provider monitors 
commands sent to an X window client program. By 
monitoring such commands, the X window computa- 
tional service provider can determine the number of bits 
and the number of pixels to be transmitted and an ideal 
period of time over which such transmission should 
occur. By dividing the number of bits by the ideal period 
of time, the X window computational service provider 
can obtain an ideal data rate expressed in bits per sec- 
ond for the data generated by the commands: Likewise, 
by dividing the number of pixels by the ideal period of 
time, the X window computational service provider can 
obtain an ideal data rate expressed in pixels per second 
for the data generated by the commands. These ideal 
data rates can be used as initial estimates of bandwidth 
needs. 

[0070] As this monitoring and estimation process 
continues, the historical information concerning the 
data rates can be used to produce statistical parame- 
ters descriptive of the data rates. For example, the aver- 
age data rate or a data rate equal to the average data 
rate plus one standard deviation can be accurately 
approximated and used to determine future bandwidth 
allocations. 

[0071 ] The data sources can perform such monitor- 
ing, analysis, and estimation of data rate parameters 
during periods when they are not transmitting data or, if 
sufficient computing resources exist at the data 
sources, during periods when they are transmitting 
data. For example, if a reduction of allocated bandwidth 
slows the rate at which a data source can transmit data; 
the data source may be able to use the time while it 
waits to transmit the data to perform the monitoring, 
analysis, and estimation of data rate parameters. 
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Adaptablv Optimizing Data Traffic 

[0072] In accordance with one embodiment of the 
invention, the computational service provider is config- 
ured to transmit one or more data streams through a 5 
viable interconnection fabric to multiple HIDs. The data 
stream is configured by the computational service pro- 
vider to adaptabiy meet the performance needs of the 
HID receiving the data stream. This enables multiple 
HIDs to receive variants of the same data stream that 10 
may differ in quantity, quality, and/or data format. For 
example, referring now to Figure 5, computational serv- 
ice provider 500 may elect to provide HID 510 with low- 
resolution data and HID 512 with high-resolution data. 
The quantity and/or quality of data sent to a HID is 15 
dependant upon the conditions encountered by the 
computational service provider when it attempts to 
transmit data across interconnection fabric 525. 

Decode Module 20 

[0073] In one embodiment of the invention, a 
decode module 505 residing on computational service 
provider 500 aids in the optimization process. Decode 
module 505 prepares data for transmission to HIDs 25 
510-512 by separating decoded data into individual 
process 507-509. Decode module 505 is capable of 
processing numerous data formats and, for example, 
may prepare different types of video or audio data for 
transmission to HIDs that request it. MPEG data, AVI 30 
data, WAV data, or other types of data formats are 
examples of data that is processed by decode module 
505 using techniques known by a practitioner skilled in 
the art. In some instances decode module 505 utilizes 
software drivers to prepare data for transmission. In 35 
other instances decode module uses analog video input 
hardware to decode data. Decode module 505 can 
obtain data for decoding (e.g. video file 515) from data 
store 535. Decode module may also obtain such data 
from other computers accessfole via interconnection 40 
fabric 525. 

[0074] Once decode module 505 makes data ready 
for transmission computational service provider 500 
makes the data available to multiple processes via a 
shareable memory segment Each process is associ- 45 
ated with an active session on computational service 
provider 500 and may have a different set of character- 
istics. In one embodiment of the invention, the number 
of sessions is related to the; number of HIDs that have 
requested decoded data, or a file that is to be converted so 
to decoded data, from computational service provider 
500. If, for example, three HIDs 510-512 simultaneously 
issue a request for video file 515 computational service 
provider 500 utilizes decode module 505 to ready video 
file 515 for distribution. Decode module 505 accepts ss 
video file 515 as input and generates a decoded data 
stream, which may be placed in the shareable memory 
segments, as output. As a result, video file 515 is 



decoded into a form that is ready for transport across 
interconnection fabric 525. The processes for the HIDs 
then forwards the data from the shareable memory seg- 
ment to interconnection fabric 525 for delivery to the 
HID displays. If, for example, video file 515 is in the 
MPEG format decode module 505 transforms the 
MPEG data stream into a data format ready for trans- 
port across interconnection fabric 525. Interconnection 
fabric 525 may be any type of communication medium 
capable of transmitting data from computational service 
provider computer 500 to HIDs 510-512. 
[0075] In accordance with one embodiment of the 
invention, the data transmission load placed on the 
computational service provider 500 and the intercon- 
nection fabric 525 is reduced by minimizing the amount 
of decoded data sent to a receiving HID. If. for example. 
HID 510 is less capable of handling video data than HID 
51 1 . then computational service provider 500 may elect 
to send lower quality data to HID 510 than it sends to 
HID 511 . This is accomplished by fluctuating the quality 
of data associated with each process 507-508. For 
example, the process 507 associated with HID 51 0 may 
be of a lesser quality than the process 508 associated 
with HID 51 1 . Also by using a common decode module 
and sharing its output stream, the processing load on 
computational service provider 500 is reduced. Further, 
in the case that a hardware decoder must be used, the 
number of HIDs 510 receiving the decoded data can be 
greater than the number of hardware decoders availa- 
ble due to the sharing of decoder output 
[0076] When the quality of data requested by HIDs 
510-512 is less than the quality of data decode module 
505 is capable of producing then computational service 
provider 500 may elect to have decode module 505 out- 
put data that is no greater in quality than the quality of 
data that is requested. For example, if decode module 
505 is capable of generating three different types of 
audio data streams (high quality, medium quality, or low 
quality) and HID 510 issues a request for low quality 
audio data while HID 512 issues a request for medium 
quality audio data then it is not necessary for decode 
module 505 to output high quality audio data until such 
data is requested. If, however. HID 51 1 issues a request 
for high quality audio data, then decode module 505 will 
begin to output high quality audio data. As a result; 
decode module 505 utilizes less processing resources 
during periods of lower quality usage. 

Processes 

[0077] Before thie data stream prepared by decode 
module 505 is transmitted across interconnection fabric 
525 to HIDs 510-512. computational service provider 
500 makes it available to a plurality of individual proc- 
esses 507-509 via a shared memory segment. Each 
process is correlated to an active session on computa- 
tional service provider 500 and may have a different set 
of characteristics. In one embodiment of the invention. 
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each process is optimized for transport to a specific 
HID. In other instances, the processes have a set of 
common characteristics determined by decode module 
505. 

[0078] If an additional HID issues a request for 
video file 515 then an additional process is created. 
Each time another request is issued computational 
service provider 500 creates another process. The total 
number of processes created is not limited by the 
number of HIDs 510-512. In some instances, however, 
more processes than the number of HIDs 510-512 are 
created whereas in other cases fewer processes are 
created. Separating the output generated by decode 
module 505 from the transmission of the data over inter- 
connect fabric 525 provides a way for computational 
service provider 500 to distribute a data stream to mul- 
tiple recipients while only having to decode video file 
515 once. This reduces the amount of processing com- 
putational service provider 500 is required to engage in 
to transmit video to simultaneous recipients and also 
allows for the efficient use of network bandwidth. 
[0079] In one embodiment of the invention the 
amount of resources needed to simultaneously provide 
data to multiple HIDs is reduced by controlling the 
amount of data transported across interconnection fab- 
ric 52S For example, if HID 510 and HID 512 both 
request data from computational service provider 500, 
but only HID 510 has the capacity to display high-reso- 
lution video data then computational service provider 
500 may elect to send high-resolution video data to HID 
510 and lower-resolution video data to HID 512. Each 
HID may receive a different data stream thereby reduc- 
ing the likelihood of overloading interconnection fabric 
525. In one embodiment of the invention, processes 
507-509 are adjusted to correlate with the type of net- 
work connection coupled to the HID requesting data. 
The computational service provider may adjust proc- 
esses 507-509 by sending a portion of the process 
across the interconnection fabric 525. For example, if 
each process 507-509 has a resolution of 1024 x 768, 
then computational service provider may elect to reduce 
the process to 640 x 480 before transmitting the data 
comprising the process across interconnection fabric 
525. This provides a way for computational service pro- 
vider 500 to exercise preferential control over what 
quantity and/or quality of data different HIDs receive. 
For example, computational service provider only trans- 
mits a limited amount of data to HIDs connected via a 
modem. HIDs connected via mediums with a higher 
data transfer rate receive larger quantifies of data. 
[0080] A benefit of separating the decoding step 
from the transmission processes is that it enables the 
transmission process to make independent choices 
about the relative importance of the decoded data when 
transmitting over a restricted bandwidth link to the com- 
putational service provider 500. For example, a HID 
could indicate that high quality audio is more important 
than video. In response to such an indication the proc- 



ess could elect to reduced the amount of video data and 
continue sending a full audio stream. Alternately, 
another HID might not care about audio and indicate a 
desire to have higher quality video instead of a higher 

5 quality audio stream. When this is the case, the process 
could decide to continue sending a full video stream and 
reduce the amount of audio data being sent. Therefore 
separating the transmissions allows for different quality 
judgments to be made when trying to adapt to different 

10 bandwidth restrictions. 

Permissions 

[0081 ] In one embodiment of the invention, compu- 

75 tational service provider 500 determines whether a par- 
ticular user has permission to access the processes 
507-509 resulting from the data stream generated by 
decode module 505. For example, referring now to Fig- 
ure 6 an example of the method used to determine if a 

20 user has permission to access a process is shown. At 
step 600 , the user issues a request for data to computa- 
tional service provider 500. In one embodiment of the 
invention, step 600 is automatically executed without 
any input from the user. In response to the issued 

25 request, computational service provider 500 utilizes two 
forms of security to determine if the user is authorized to 
obtain the requested data. At step 605. computational 
service provider 500 examines whether the user has 
permission to obtain a display window. When a user 

30 logs onto computational service provider 500, for exam- 
ple, computational service provider 500 authenticates 
the user's log on information and provides the user with 
*■*= a display window. Step 605 checks to see if this authen^ 
tication procedure was properly completed. 

35 [0082] At step 610. computational service provider 
500 determines whether the HID requesting the proc- 
ess has an active session on computational service pro- 
vider 500. If an active session exists, then step 620 is 
executed and the HID is granted permission to obtain 

40 the process it is requesting. If, however, an active ses- 
sion does not exist on computational service provider 
500, then step 61 5 is executed: At step 615. the compu- 
tational service provider determines whether the HID 
requesting access to the process has permission to 

45 establish an active session on computational service 
provider 500. If. permission is granted, then the HID 
establishes an active session on the computational 
service provider at step 620 and the HID may reissue a 
request for a process by executing step 600. If the HID 

so is not granted permission to establish an active session 
then access to the process is denied at step 61 6. 

Resource Optimization 

55 [0083] Referring now to Figure 7. an embodiment of 
the invention is shown that utilizes a resource optimiza- 
tion module to determine how much bandwidth to con- 
sume while transmitting a particular data stream to a 
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HID. For example, HIDs 760-764 may simultaneously 
request data file 701 from computational service pro- 
vider 700. In response computational service provider 
700 converts data file 701 into a data stream using 
decode module 705. The data stream is then separated s 
into independent processes 710-715, Resource optimi- 
zation module 707 resides on computational service 
provider 700 and communicates with HIDs 717-722 to 
determine how much bandwidth it may consume while 
transmitting processes 710-715. 10 
[0084] If, for example, HID 763 initiates a request 
for data file 701. then resource optimization module 
sends HID 763 a message stating the amount of band- 
width it would like to consume while transmitting data 
file 701 across interconnection fabric 755. Interconnec- is 
tion fabric 755 may be the Internet or any other type of 
telecommunication medium. HID 763 responds with a 
second message that identifies how much network 
bandwidth is available. Each HID 760-764 separately 
negotiates the amount of bandwidth to be used for 20 
transmission. If, for example, HID 760 is connected to 
interconnection fabric 755 via a modem connection and 
HID 761 is connected via an Ethernet network, then HID 
760 is allocated less bandwidth than HID 761 . Each HID 
760-764 is transmitted an amount of data that appropri- 2s 
ately balances the data requirements of the user with 
the amount of available network bandwidth. 
[0085] Referring now to Figure 8, the process used 
by resource optimization module to determine how 
much network bandwidth to utilize while transmitting 30 
data to a particular HID is illustrated. At step 800, a HID 
initiates a request for data to computational service pro- 
vider 700. In one embodiment of the invention, the 
request pertains to data residing on computational serv- 
ice provider 700. A HID, however, may also contact 35 
computational service provider 700 to obtain data from 
other sources. For example. HID 763 may request data 
file 701 or the processes 710-715 generated by decode 
module 705. HID 763 may also request data from other 
sources available to computational service provider 700 40 
via interconnection fabric 755. 

[0086] In response to a request for data from a HID, 
computational service provider 700 proceeds to step 
805. At step 805, computational service provider 700 
communicates a bandwidth preference to the HID. In 45 
one embodiment of the invention, computational service 
provider 700's bandwidth preference is transmitted to 
the HID in a bandwidth preference message. The band- 
width preference message specifies the amount of 
bandwidth computational service provider 700 wishes so 
to use to transmit data. For example, if the network con- 
necting computational service provider 700 and HID 
764 supports a data transmission rate of 100 megabits 
per second the bandwidth preference message identi- 
fies what portion of that capacity to use to transmit the 55 
requested file. If computational service provider 700 is 
attempting to send high-resolution video to HID 764, 
then the bandwidth preference message may request 



all 100 megabits. Whether computational service pro- 
vider 700 is granted the amount of bandwidth it requests 
is dependent upon how much bandwidth is currently 
available. The amount of bandwidth available may vary 
according to the portion used by other networks devices 
and/ or network services. 

[0087] In one embodiment of the invention, the user 
has control over the amount of bandwidth utilized. If, for 
example, the user wishes to consume a specific amount 
of network resources, then the user may communicate 
this to computational service provider 700 via a per- 
sonal bandwidth preference message. At step 810, the 
HID determines whether or not the user has stated a 
personal bandwidth preference. If the user has a per- 
sonal bandwidth preference then the HID proceeds to 
step 820 where a determination is made as to whether 
the user's preference is greater than the amount of net- 
work bandwidth requested by computational service 
provider 700. If the user's personal bandwidth prefer- 
ence is less than the amount of bandwidth available, the 
HID transmits a bandwidth allocation message to com- 
putational service provider 700 that identifies the 
amount of bandwidth the user wishes to consume. At 
step 835, the computational service provider uses the 
amount of bandwidth identified in the user's personal 
bandwidth preference message. 
[0088] If the user's personal bandwidth preference 
is greater than the amount of bandwidth available then 
the HID proceeds to step 825 where it ignores the user's 
preference and communicates the amount of actual 
bandwidth available to computational service provider 
700 using a bandwidth allocation message. Once this 
occurs computational service provider 700 proceeds to 
step 840 where it utilizes the amount of bandwidth spec- 
ified In the bandwidth allocation message to transmit 
data to the requesting HID. 

[0089] If the outcome of the determination made at 
step 810 is that the user, does not have a personal 
bandwidth preference then the HID proceeds to step 
815. At step 815, the HID responds by transmitting a 
bandwidth allocation message to computational service 
provider 700. In one embodiment of the invention, the 
bandwidth allocation message informs computational 
service provider 700 how much bandwidth is available 
for use. This determination occurs automatically without 
obtaining any input from the user. At step 840, the com- 
putational service provider begins transmitting data to 
the HID in a way that takes into account the amount of 
bandwidth available for use. As a result the amount of 
data transmitted to the HID by the computational serv- 
ice provider coincides with the amount of network band- 
width available to the HID. 

[0090] In one embodiment of the invention, step 
840 modifies the processes created by the computa- 
tional service provider to adaptably meet the perform- 
ance needs of the HID requesting the process. For 
example, if the size of a particular process consumes to 
great a portion of bandwidth then the computational 
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service provider can reduce the size of the process 
before transmitting it to the requesting HID. This ena- 
bles multiple HIDs to receive variants of the same data 
stream that may differ in quantity, quality, and/or data 
format. 

Embodimen t of Computer Execution Environment 
(Hardware) 

[0091] An embodiment of the invention can be 
implemented as computer software in the form of com- 
puter readable code executed on a general purpose 
computer such as computer 400 illustrated in Figure 4 f 
or in the form of bytecode class files executable within a 
Java™ runtime environment running on such a compu- 
ter, or in the form of bytecodes running on a processor 
(or devices enabled to process bytecodes) existing in a 
distributed environment (e.g.. one or more processors 
on a network). A keyboard 410 and mouse 41 1 are cou- 
pled to a system bus 418. The keyboard and mouse are 
for introducing user input to the computer system and 
communicating that user input to processor 413. Other 
suitable input devices may be used in addition to, or in 
place of. the mouse 411 .and keyboard 410. I/O 
(input/output) unit 419 coupled to system bus 418 repre- 
sents such I/O elements as a printer, A/V (audio/video) 
I/O. etc. 

[0092] Computer 400 includes a video memory 

414. main memory 415 and mass storage 414, all cou- 
pled to system bus 41 8 along with keyboard 41 0, mouse 
411 and processor 413. The mass storage 414 may 
include both f ixed and removable media, such as mag- 
netic, optical or magnetic optical storage systems or any 
other available mass storage technology. Bus 418 may 
contain, for example, thirty-two address lines for 
addressing video memory 414 or main memory 415. 
The system bus 418 also includes, for example, a 64-bit 
data bus for transferring data between and among the 
components, such as processor 413. main memory 

41 5, video memory 41 4 and mass storage 414. Alterna- 
tively, multiplex data/address lines may be used instead 
of separate data and address lines. 

[0093] In one embodiment of the invention, the 
processor 413 is a microprocessor manufactured by 
Sun Microsystems, Inc., such as the SPARC™ micro- 
processor, or a microprocessor manufactured by 
Motorola; such as the 680X0 processor, or a microproc- 
essor manufactured by Intel, such as the 80X86, or Pen- 
tium processor. However, any other suitable 
microprocessor or microcomputer may be utilized. Main 
memory 415 is comprised of dynamic random access 
memory (DRAM). Video memory 414 is a dual-ported 
video random access memory. One port of the video 
memory 414 is coupled to video amplifier 416. The 
video amplifier 416 is used to drive the cathode ray tube 
(CRT) raster monitor 417. Video amplifier 416 is well 
known in the art and may be implemented by any suita- 
ble apparatus. This circuitry converts pixel data stored 



in video memory 414 to a raster signal suitable for use 
by monitor 41 7. Monitor 41 7 is a type of monitor suitable 
for displaying graphic images. 

[0094] Computer 400 may also include a communi- 

5 cation interface 440 coupled to bus 418. Communica- 
tion interlace 440 provides a two-way data 
communication coupling via a network link 441 to a local 
network 444. For example, if communication interface 
440 is an integrated services digital network (ISDN) 

10 card or a modem, communication interface 440 pro- 
vides a data communication connection to the corre- 
sponding type of telephone line, which comprises part 
of network link 441. If communication interface 440 is a 
local area network (LAN) card, communication interface 

75 440 provides a data communication connection via net- 
work link 441 to a compatible LAN. Wireless links are 
also possible. In any such implementation, communica- 
tion interface 440 sends and receives electrical, electro- 
magnetic or optical signals which carry digital data 

20 streams representing various types of information. 
[0095] Network link 441 typically provides data 
communication through one or more networks to other 
data devices. For example, network link 441 may pro- 
vide a connection through local network 444 to local 

25 computational service provider computer 443 or to data 
equipment operated by an Internet Service Provider 
(ISP) 444. ISP 444 in turn provides data communication 
services through the world wide packet data communi- 
cation network now commonly referred to as the "Inter- 

30 net" 445. Local network 444 and Internet 445 both use 
electrical, electromagnetic or optical signals which carry 
digital data streams. The signals through the various 
networks- and the signals on network -link-441 = and 
through communication interface 440. which carry the 

35 digital data to and from computer 400. are exemplary 
forms of carrier waves transporting the information. 
[0096] Computer 400 can send messages and 
receive data, including program code, through the net- 
works) , network link 441, and communication interface 

40 440. In the Internet example, remote computational 
service provider computer 446 might transmit a 
requested code for an application program through 
Internet 445, ISP 444, local network 444 and communi- 
cation interface 440. 

45 [0097] The received code may be executed by proc- 
essor 41 3 as it is received, and/or stored in mass stor- 
age 414. or other non-volatile storage for later 
execution. In this manner, computer 400 may obtain 
application code in the form of a carrier wave. 

so [0098] Application code may be embodied in any 
form of computer program product. A computer program 
product comprises a medium configured to store or 
transport computer readable code, or in which computer 
readable code may be embedded. Some examples of 

55 computer program products are CD-ROM disks, ROM 
cards, floppy disks, magnetic tapes, computer hard 
drives, computational service providers on a network, 
and carrier waves. 
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[0099] The computer systems described above are 
for purposes of example only. An embodiment of the 
invention may be implemented in any type of computer 
system or programming or processing environment 
When a general purpose computer system such as the 
one described executes the process and process flows 
described herein, it is configured to adaptably distribute 
data to one or more recipient devices. 
[0100] Thus, a method and apparatus for adaptably 
providing data to network environment is described. 
[0101] The features disclosed in the foregoing 
description, in the claims and/or in the accompanying 
drawings may, both separately and in any combination 
thereof, be material for realising the invention jn diverse 
forms thereof. 

Claims 

1 . A method for adaptably providing data comprising : 

transmitting a request for data from a request- 
ing device to a computational service provider 
via an interconnection fabric having a band- 
width limitation[s]; 

determining whether to allow said requesting 

device to access said data; 

obtaining said data when said access is 

granted; 

modifying said data to account for said band- 
width limitation[s] of said interconnection fabric; 
delivering said modified data to said requesting 
device via said interconnection fabric. 

2. The method of claim 1 further comprising the steps 
of: 

responding to said request by having said com- 
putational service provider send a bandwidth 
preference message to said requesting device; 
notifying said computational service provider of 
said bandwidth limitations of said interconnec- 
tion fabric. 

3. The method of claim 1 , wherein said step of modify- 
ing said data to account for said bandwidth limita- 
tion^] further comprises: 



10 



15 



20 



25 



30 



35 



40 



preferred bandwidth is greater than said availa- 
ble bandwidth. 

5. The method of claim 1 further comprising: 

determining a processing characteristic of said 
requesting device; 

modifying said data to account for said 
processing characteristic. 

6. TTie method of claim 3 wherein a user specifies said 
preferred bandwidth. 

7. The method of claim 3 wherein said preferred band- 
width is determined by said computational service 
provider. 

8. The method of claim 1 wherein said step of deter- 
mining whether to allow said requesting device 
access to said data further comprises: 

determining if said requesting device has per- 
mission to obtain a display window; 
determining if said requesting device has an 
active session on said computational service 
provider. 

9. The method of claim 1 wherein said step of modify- 
ing said data changes the amount of said data 
delivered to said requesting device. 

1 0. The method of claim 1 , wherein said step of modify- 
ing said data changes the quality of said data trans- 
mitted to said requesting device. 

1 1. A computer program product comprising: 

a computer usable medium having computer 
readable program code embodied therein for 
adaptably providing data to a network environ- 
ment, said computer program product compris- 
ing: 



45 



determining a preferred bandwidth for transmit- 
ting said data across said interconnection fab- 
ric; so 
determining an available bandwidth of said 
interconnection fabric. 

4. The method of claim 3 further comprising: 



determining if said preferred bandwidth is 
greater than said available bandwidth; 
utilizing said available bandwidth when said 



computer readable program code config- 
ured to cause a first computer to transmit a 
request for data to a second computer via 
an interconnection fabric having a band- 
width limitation; 

computer readable program code config- 
ured to cause said second computer to 
determine whether to allow said first com- 
puter access to said data; 
computer readable program code config- 
ured to cause said second computer to 
55 obtain said data when access is granted to 

said first computer; 

computer readable program code config- 
ured/to cause said second computer to 



15 



MSDOC1D: <EP 1043655A2_I_> 



29 

determine said bandwidth limitation; 
computer readable program code config- 
ured to cause said second computer to 
modify said data to account for said band- 
width limitation of said interconnection fab- s 
ric; 

computer readable program code config- 
ured to cause said second computer to 
transmit said data to said first computer via 
said interconnection fabric. w 

12. The computer program product of claim 1 1 further 
comprising: 

computer readable program code configured to is 
cause said second computer to determine said 
bandwidth limitation by performing the steps of: 

obtaining a preferred bandwidth for trans- 
mitting said data across said interconnec- 20 
tion fabric; 

obtaining an available bandwidth of said 
interconnection fabric. 

13. The computer program product of daim 12 further 25 
comprising: 

computer readable program code configured to 
cause said second computer to determine if 
said preferred bandwidth is greater than said 30 
available bandwidth and to utilize said available 
bandwidth when said preferred bandwidth is 
greater than said available bandwidth^— - — 

14. The computer program product of claim 1 1 further 35 
comprising: 

computer readable program code configured to 
cause said second computer to determine a 
processing characteristic of said second com- 40 
puter and to modify said data to account for 
said processing characteristic. v , 

15. The computer program product of claim 12 further 
comprising: as 

computer readable program code configured to 
enable a user to identify said preferred band- 
width. 

50 

1 6. The computer program product of claim 1 2 further 
comprising: 

computer readable program code configured to 
enable said second computer to identify said ss 
preferred bandwidth. 

17. The computer program product of claim 1 1 wherein 



30 

said computer readable program code configured 
to determine whether to allow said first computer 
access to said data further comprises computer 
readable program code configured to determine if 
said first computer has permission to obtain a dis- 
play window. 

18. The computer program product of claim 1 1 wherein 
said computer readable program code configured 
to determine whether to allow said first computer 
access to said data further comprises computer 
readable program code configured to determine if 
said first computer has an active session on said 
second computer. 

19. The computer program product of claim 1 1 wherein 
said computer readable program code configured 
to cause said second computer to modify said data 
further comprises computer readable program 
code configured to change the amount of said data 
transmitted to said requesting device. 

20. The computer program product of claim 1 1 wherein 
said computer readable program code configured 
to cause said second computer to modify said data 
further comprises computer readable program 
code configured to change the quality of said data 
transmitted to said requesting device. 

21 . A method for adaptably providing data to a network 
environment comprising: 

communicating a request tor data from a 
requesting device to a computational service 
provider via an interconnection fabric; 
responding to said request by obtaining a pre- 
ferred bandwidth for transmitting said data 
across said interconnection fabric; 
modifying said data to optimally utilize said pre- 
ferred bandwidth; 

transmitting said data from said computational 
service provider to said requesting device via 
said interconnection fabric. 

22. The method of claim 21 further comprising the 
steps of: 

obtaining an available bandwidth; 
determining if said preferred bandwidth is 
greater than said available bandwidth; 
utilizing said available bandwidth when said 
preferred bandwidth is greater than said availa- 
ble bandwidth. 

23. The method of claim 21 wherein a user specifies 
said preferred bandwidth. 

24. The method of claim 21 wherein said preferred 
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bandwidth is obtained by said computational serv- 
ice provider. 

25. The method of claim 21 further comprising the 
steps of: s 

determining whether to allow a requesting 
device access to said data; 
obtaining said data when said access is 
granted. w 



26. The method of claim 25 wherein said step of deter- 
mining whether to allow access to said data further 
comprises: 

determining if said requesting device has per- 
mission to obtain a display window; 
determining if said requesting device has an 
active session on said computational service 
provider. 

27. The method of claim 21 wherein said step of modi- 
fying said data is performed by changing the 
amount of said data 



28. The method of daim 21 , wherein said step of mod- 
ifying said data is performed by modifying the qual- 
ity of said data. 

29. The method of claim 28 wherein said data has a 
resolution and said quality of said data is modified 
by changing said resolution. 

30. The method of claim 21 wherein said step of modi- 
fying said data takes into account the processing 
characteristics of said requesting device. 

31. A method for adaptably providing data comprising: 

sending a request for- data from a requesting 
device having a processing characteristic to a 
computational service provider via an intercon- 
nection fabric having a bandwidth limitation- 
converting said data into decoded data; 
placing said decoded data into a sharable 
memory segment; 

modifying said decoded data to account for 
said bandwidth limitation; 
transmitting said decoded data from said 
sharable memory segment to said requesting 
device via said interconnection fabric. 

32. The method of claim 31 , further comprising: 

} 

determining said bandwidth limitation. 

33. The method of daim 32 wherein said step of deter- 
mining said bandwidth limitation further comprises: 



obtaining a preferred bandwidth for transmitting 
said decoded data across said interconnection 
fabric; 

obtaining an available bandwidth of said inter- 
connection fabric. 

34. The method of claim 33 further comprising: 

determining if said preferred bandwidth is 
greater than said available bandwidth; 
utilizing said available bandwidth when said 
preferred bandwidth is greater than said availa- 
ble bandwidth. 



15 35. The method of daim 31 further comprising: 

obtaining said processing characteristic of said 
requesting device. 
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20 36. The method of daim 35 wherein said step of modi- 
fying said decoded data accounts for said process- 
ing characteristic. 

37. The method of daim 33 wherein a user specifies 
said preferred bandwidth. 

38. The method of claim 33 wherein said preferred 
bandwidth is obtained by said computational serv- 
ice provider. 

39. The method of claim 31 further comprising the 
steps of: 

determining whether to allow said requesting 
35 device access to said decoded data 

40. The method of claim 39 wherein said step of deter- 
mining whether to allow said requesting device 
access to said decoded data further comprises: 

determining if said requesting device has per- 
mission to obtain a display window; 
determining if said requesting device has an 
active session on said computational service 
provider. 

41. The method of claim 31 wherein said step of modi- 
fying said decoded data effects the amount of said 
decoded data transmitted to said requesting device. 

42. The method of daim 31 , wherein said step of mod- 
ifying said decoded data changes the quality of said 
decoded data transmitted to said requesting device. 

43. A system for adaptably providing data to a network 
environment comprising: 

a requesting device configured to issue a 
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44. 



request for data via an interconnection fabric 

having a bandwidth limitation; 

a computational service provider configured to 

respond to said request by executing the steps 

of: 

obtaining data from a data store; 
decoding said data to create a data 
stream; 

placing said data steam into a shared 
memory; 

modifying said data stream to account for 
said bandwidth limitation; 
transmitting said data stream from said 
sharable memory segment to said request- 
ing device via said interconnection fabric. 

The system of claim 43 wherein said step of modi- 
fying said data stream modifies a copy of said data 
steam. 



45. The system of claim 43, wherein said computa- 
tional service provider is notified of said bandwidth 
limitation. 

46. The system of claim 43 furth«- comprising: 

sending a preferred bandwidth for transmitting 
said decoded data across said interconnection 
fabric to said requesting device; 
responding to said preferred bandwidth by 
transmitting an available bandwidth of said 
interconnection fabric to said computational 
service provider. 

47. The system of claim 46 wherein said computational 
service provider is configured to determine if said 
preferred bandwidth is greater than said available 
bandwidth. 

48. The system of claim 47 wherein said computational 
service provider is configured to utilize said availa- 
ble bandwidth when said preferred bandwidth is 
greater than said available bandwidth. 

49. The system of claim 43 wherein said computational 
service provider is configured to determine a 
processing characteristic of said requesting device. 

50. The system of claim 49 wherein said step of modi- 
fying said data stream accounts for said processing 
characteristic. 



51. The system of claim 46 wherein a user specifies 
said preferred bandwidth. 55 

52. The system of claim 46 wherein said preferred 
bandwidth is determined by said requesting device. 
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53. The system of claim 43 wherein said computational 
service provider is configured to perform the steps 
of: 

determining whether to allow said requesting 
device access to said data stream. 

54. The system of daim 53 wherein said step of deter- 
mining whether to allow said requesting device 
access to said data stream further comprises: 

determining if said requesting device has per- 
mission to obtain a display window; 
determining if said requesting device has an 
active session on said computational service 
provider. 

55. The system of claim 43 wherein said step of modi- 
fying said data stream effects the amount of said 
data transmitted to said requesting device. 

56. The system of claim 43. wherein said step of modi- 
fying said data stream changes the quality of said 
data stream transmitted to said requesting device. 

57. The system of claim 43, wherein the quality of said 
data stream is changed by altering the resolution at 
which said data stream is transmitted to said 
requesting device. 
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(54) Method and apparatus for adaptably providing data to a network environment 



(57) A method and apparatus for adaptably provid- 
ing data to a virtual desktop system is described. The 
computational service provider is configured to prepare 
and transmit one or more data streams through a viable 
interconnection fabric to multiple HIDs. The data stream 
is configured by the computational service provider to 
adaptably meet the performance needs of the HID re- 
ceiving the data stream. This enables multiple HIDs to 
receive variants of the same data stream that may differ 
in quantity, quality, and/or data format. In one embodi- 
ment of the invention, a decode module prepares data 
for transport by separating decoded data into individual 
processes. Before a HID may connect to a process the 
HID is authenticated. The processes are further adjust- 
ed by a resource optimization module to take into ac- 
count the characteristics of each HID requesting ac- 
cess. The resource optimization module also takes into 
account the characteristics of the interconnection fabric 
coupling the HID and the computational service provid- 
er. 
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